1. Personal data protection
This Privacy Policy explains what types of data we process, why we do so, the legal basis for processing, third parties who may have access to the data, and the rights you have under the General Data Protection Regulation (GDPR) and applicable Croatian law.
2. Data controller
Legal entity: Studio Meandarh d.o.o.
Address: Ul. Ivana Kukuljevića Sakcinskog 12, 21000 Split, Croatia
Company ID (OIB): 92582841767
IBAN: HR8724020061101277098 (Erste&Steiermärkische Bank d.d.)
Email: kontakt@meandarh.com
Studio Meandarh d.o.o. is registered with the Commercial Court in Split under company number (MBS): 060496242. Share capital of €2,500.00 is paid in full.
3. Type, purpose, legal basis, and retention period
| Type | Purpose | Legal basis | Retention |
|---|---|---|---|
| Newsletter subscription and notifications | Double opt-in during newsletter sign-up | As long as subscribed | |
| First name | Location analysis for building feasibility | Form submission | 3 years |
| Last name | Location analysis for building feasibility | Form submission | 3 years |
| Mobile | Location analysis for building feasibility | Form submission | 3 years |
| Location analysis for building feasibility | Form submission | 3 years | |
| Cadastral parcel | Location analysis for building feasibility | Form submission | 3 years |
| Parcel municipality | Location analysis for building feasibility | Form submission | 3 years |
| Parcel status | Location analysis for building feasibility | Form submission | 3 years |
| Building area | Location analysis for building feasibility | Form submission | 3 years |
| Building type | Location analysis for building feasibility | Form submission | 3 years |
| Project type | Location analysis for building feasibility | Form submission | 3 years |
| Additional info | Location analysis for building feasibility | Form submission | 3 years |
| First name | Scheduling an introductory meeting | Consent acknowledging the Privacy Policy | 1 year |
| Last name | Scheduling an introductory meeting | Consent acknowledging the Privacy Policy | 1 year |
| Scheduling an introductory meeting | Consent acknowledging the Privacy Policy | 1 year | |
| Country | Scheduling an introductory meeting | Consent acknowledging the Privacy Policy | 1 year |
| Mobile | Scheduling an introductory meeting | Consent acknowledging the Privacy Policy | 1 year |
| Additional info | Scheduling an introductory meeting | Consent acknowledging the Privacy Policy | 1 year |
4. Who do we share your data with?
We share data with the Brevo platform, which is a tool for managing newsletters, forms, and online meetings. They use the following data centres:
- OVH (France)
- GCP (Belgium)
- Scaleway (France)
All listed Brevo data centres are located within the EU and comply with the General Data Protection Regulation (GDPR).
Our website uses Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) as a content delivery network (CDN) and hosting provider. Cloudflare processes visitor IP addresses for the purpose of content delivery, security, and protection against attacks. Cloudflare is certified under the EU-US Data Privacy Framework, ensuring an adequate level of personal data protection for transfers to the USA. More information is available at: cloudflare.com/privacypolicy.
We use Google Analytics and Microsoft Clarity for website analytics. Google Analytics helps us track visit statistics, user behaviour, and content optimisation. Microsoft Clarity enables analysis of user interaction with the website, including heatmaps and session recordings, to improve user experience.
5. How do we protect your data?
Our website is served via the Cloudflare Pages platform. Static content (HTML, CSS, images) is distributed through Cloudflare's global network. Server-side functions (contact form, newsletter) are processed on Cloudflare's servers with Smart Placement enabled, which optimises the processing location based on the position of external services (Brevo, EU).
Cloudflare does not store personal data from forms. Data is forwarded directly to Brevo (EU) and is not retained on Cloudflare's infrastructure.
Data collected via the web is protected by an SSL certificate, a technology that encrypts the connection between our server and your browser, ensuring no third party can access the data you provide.
6. Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Data portability
- Erasure of personal data
- Restriction of processing
- Object to processing of personal data
You can exercise any of these rights by:
- Sending an email to: kontakt@meandarh.com
- Sending a request to our physical address: Ul. Ivana Kukuljevića Sakcinskog 12, 21000 Split
You may also lodge a complaint with the supervisory authority for personal data protection, the Croatian Personal Data Protection Agency (AZOP):
- By email: azop@azop.hr
- By post: Selska cesta 136, 10 000 Zagreb
7. Changes to this Privacy Policy
We reserve the right to amend this privacy policy to ensure compliance with laws and practices. All changes will be published on this page.
If you have any questions regarding this privacy policy, feel free to contact us at kontakt@meandarh.com.
Last updated: 21.09.2026